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IN THE CLAIMS: 



Please cancel original claims 1-20. 



PLEASE ADD THE FOLLOWING CLAIMS: 
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21. Processing procedure for an electronic system subject to transient error constraints, 
; >; in which in a given real time cycle, in other words in a given operational cycle of a 
" software task that is executed periodically and continuously, two virtual sequences located 

4 r 

on a single physical sequence are multiplexed in time (the data resulting from each 
execution of a virtual sequence being stored so that they can be voted before use), and in 
which if an error is detected, the real time cycle in progress is inhibited and a healthy 
context is reloaded to make a restart that consists of a nominal execution of the next cycle 
starting from the reloaded context. 



22. Process according to claim 1, in which three error confinement areas (time, 
software and hardware) are used. 



23. Process according to claim 1, in which a memory plane in the control unit is used, 
protected from singular events by an error detection and correction code. 



24. Process according to claim 1, in which the detection/correction granularity used is 
the real time cycle for the software tasks being performed on the computer. 
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25. Process according to claim 1, in which the "backup context" function activated 
regularly is achieved by means of an index change. 



26. Process according to claim 1, in which the "restore context" function activated 
during an error correction is performed due to the fact that the index indicating the context 
considered to be healthy, in other words error free, after the previous operational cycle has 
not changed, even though is has usually swapped, in other words no errors are detected; 
this "no swap" being inherent to inhibition of the real time cycle in which the error is 
detected. 

27. Process according to claim 1, in which segmentation of the memory is associated 
with a hardware device to check access rights. 

28. Process according to claim 7, in which the hardware device to check access rights 
enables several access configurations, each configuration allowing access to one or several 
non-contiguous segments. 

29. Process according to claim 7, in which the hardware device to check access rights is 
used to select several access configurations with logical combinations of one or several 
keys. 
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30. Process according to claim 1, in which the variables/data to be voted are put into a 
table. 



3 1 . Process according to claim 1 , in which a software vote is used for which integrity is 
achieved by software checks, particularly including a software and hardware monitoring 
processor. 

32. Process according to claim 1, in which a transfer to the control electronics is 
controlled by a hardware device that checks access rights and limits the validity of this 
transfer in time, thus delimiting a hardware error confinement area. 

33. Process according to claim 1, used in space applications. 

34. Device for monitoring memory accesses in a computer comprising a control unit 
built around a microprocessor and a memory, in which the memory is partitioned into 
segments, in which each segment has an access right defined by a logical function of all or 
some of the keys available in the device, the access right to each segment being checked in 
real time, and in which access for some segments will only be authorized if there is a very 
strong probability that the microprocessor will be in a good operating state, thus enabling 
safe storage of critical data. 
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35. Device according to claim 14, in which a set of non-contiguous segments is 
accessible, in read only for some segments and in read/write for other segments, depending 
on the programming of the keys present in the device. 

36. Device according to claim 14 in which the segment size is arbitrary, so that it can be 
optimized for a given application. 

37. Device according to claim 14, in which definitions of the set of available keys, the 
logical combination functions for these keys and the configuration of the accessible 
segments as a function of the programming of the keys, are specific. 

38. Device according to claim 14, in which one of the segments has a write 
authorization accessible in an exceptional state of the computer, thus enabling safe storage 
of critical data. 

39. Device according to claim 14, in which segments enabling safe storage of critical 
data are stored by pair, working in flip-flop. 



